Privacy Policy

1. Introduction

This Privacy Policy explains how BXI Interactive, LLC ("we", "us", or "our") collects, uses, stores, and protects your information when you use Bloxtsar at bloxtsar.com (the "Service"). Bloxtsar is owned and operated by BXI Interactive, LLC. By accessing or using the Service, you agree to the practices described in this policy.

2. Information We Collect

We collect information necessary to operate the Service, including:

• Roblox Account Information: When you log in using Roblox OAuth2 (required), we collect your Roblox User ID, username, and avatar. This is necessary to create your account and access the platform.
• Discord Account Information: If you optionally link Discord, we collect your Discord User ID, username, discriminator, and avatar for additional features.
• Account Email Address: If you add an email address in account settings, we collect and store that email address and whether it has been verified. We use internal placeholder email values for accounts that do not have a real email address; these placeholders are used only for authentication-system compatibility and are not treated as your contact email.
• Profile Information: Bios, display preferences, and any other customization you add to your profile.
• User-Generated Content: Trade advertisements, messages, forum posts, comments, ratings, and any other content you submit.
• Uploaded Files: Images and files you upload to the platform.
• Chat Message Images: Images you send in private chat messages are stored temporarily and automatically expire after 14 days.
• Usage Data: Pages visited and time spent on the site via Google Analytics. Product feature usage (for example, creating or viewing trade ads, browsing deals, starting VIP checkout, or joining a Roblox server from our site) via PostHog. When you are logged in, PostHog may associate those events with your Bloxtsar account ID and basic profile details such as Roblox username and VIP status.
• Technical Data: IP addresses, approximate location derived from your IP (country, region/state, city, and time zone), browser type, device type, and operating system. Used for security, fraud prevention, account session management (so you can see where you're signed in from), and analytics.
• Communications: Messages you send to support or other users through our messaging system, including the contact email address you provide when submitting a support request.

We do not collect or store passwords. Authentication is handled entirely by Roblox and Discord.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate users via Roblox (required) and Discord (optional)
• Enable messaging, trading, and community features
• Display profiles and user-generated content
• Process subscriptions and premium features
• Verify account email addresses and send email verification messages
• Send service-related account, support, security, and transactional notifications
• Enforce platform rules and prevent abuse, scams, and fraud
• Moderate content using automated and manual tools
• Show you the active sign-in sessions on your account, including the approximate location and device used for each, so you can identify and revoke any session you don't recognize
• Improve performance, fix bugs, and analyze usage
• Comply with legal obligations

We do not sell your personal data.

4. Data Sharing & Third Parties

Analytics: We use Google Analytics to understand overall site traffic and engagement, and PostHog to understand how product features are used. We configure PostHog to collect only specific product events we define—not automatic click tracking or performance monitoring. PostHog's privacy policy is available at posthog.com/privacy. Google's privacy policy is available at policies.google.com/privacy.

Bloxtsar does not sell personal data. Information is shared only when necessary:

• Service Providers: Roblox and Discord (for authentication), payment processors, hosting providers, email delivery providers, support/customer communication tools, content moderation services, Google Analytics (site traffic and engagement), and PostHog (product analytics).
• Advertising Partners: Third-party advertisers such as Google AdSense and NitroPay may use cookies for personalized advertising. This may be considered a "sale" or "sharing" under certain privacy laws (see Section 5).
• Legal Requirements: We may disclose information when required by law, to respond to legal requests, prevent fraud, or enforce our Terms of Service.
• Public Information: Your Roblox username, avatar, public profile, trade ads, forum posts, and comments are visible to other users.

5. Advertising & Third-Party Advertisers

Bloxtsar may display advertisements through third-party partners, including Google AdSense and NitroPay. These providers may use cookies or similar technologies to display personalized ads based on your browsing activity.

Advertising technologies are governed by the respective providers' privacy policies:

• Google Privacy Policy
• NitroPay Privacy Policy

6. Cookies & Local Storage

Bloxtsar uses cookies for:

• Authentication: Keeping you logged in
• Preferences: Saving your settings
• Analytics: Google Analytics (site traffic) and PostHog (product feature usage). PostHog may store a cookie or similar identifier in your browser.
• Advertising: Displaying ads through third-party partners

You can control cookies through your browser settings. Blocking cookies may affect site functionality.

7. Content Moderation & Safety

To maintain a safe environment, we use:

• Automated Moderation: Text and image scanning, profanity filtering, spam detection, and scam prevention
• Rate Limiting: Message throttling and action limits
• User Reports: Community reporting of violations
• Manual Review: Staff review of flagged content
• Audit Logs: Retention of moderation actions for enforcement

Moderation records are retained indefinitely to prevent repeat offenses.

8. Data Retention

• Account Data: Retained unless you request deletion via [email protected] or violate our Terms
• Account Email Address: Retained while it remains on your account or until your account is deleted. Email verification tokens expire automatically and are replaced when a new verification email is requested.
• User-Generated Content: Trade ads, posts, and comments retained unless manually deleted
• Usage Logs: Retained for analytics, security, and troubleshooting
• Moderation Records: Retained indefinitely to prevent abuse
• Temporary Data: Rate-limit counters and other ephemeral data expire automatically
• Uploaded Files: Remain stored unless removed through moderation or deletion
• Chat Message Images: Images sent in chat messages are automatically deleted after 14 days

9. Your Rights & Choices

Access and Update: Update your profile through account settings.

Account Email: Add or change your account email address through account settings. Email is used for account verification and service-related account or transactional messages.

Delete Content: Delete your own trade ads, posts, and comments.

Manage Sessions: View your active sign-in sessions, including the approximate location and device used for each, and revoke any session you don't recognize from Settings → Sessions. Revoked sessions are retained for up to 90 days for security auditing and then permanently deleted.

Account Deletion: Email [email protected] to delete your account. This is permanent and will remove all your data, including profile, trade history, messages, posts, and all session records. Moderation records may be retained to prevent repeat violations.

Email Preferences: We use email for service-related messages such as verification, support, security, account updates, and transactional notices. If we send optional promotional emails, you can unsubscribe from those emails or contact support.

10. California Consumer Privacy Act (CCPA)

California residents have the right to:

• Right to Know: Request information about data we collect and share
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of "sale" or "sharing" of data for advertising (though we don't sell data for money, advertising partnerships may qualify under CCPA)
• Right to Non-Discrimination: We won't discriminate for exercising your rights

Contact [email protected] to exercise these rights, including account deletion. We may verify your identity before processing requests.

11. European Union Users (GDPR)

EEA residents have rights under GDPR:

• Right of Access: Obtain a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive data in structured format
• Right to Object: Object to certain processing
• Right to Withdraw Consent: Withdraw consent anytime

Legal Basis:

• Consent (by using the Service)
• Contractual necessity (to provide the platform)
• Legitimate interests (security, fraud prevention, improvement)
• Legal obligations (compliance with laws)

Contact [email protected] to exercise your rights, including account deletion.

12. Live Chat, Messaging & Public Content

• Public Content: Trade ads, forum posts, comments, and public profiles are visible to other users.
• Private Messages: Direct messages are private but may be accessed for moderation, safety, or investigating abuse.
• Chat Message Images: Images you send in chat are stored temporarily and expire after 14 days, after which they are automatically deleted.
• User Responsibility: Don't share sensitive information publicly or with untrusted users. We're not responsible for how others use content you share.

13. Data Security

We protect your information using:

• HTTPS encryption
• Secure OAuth2 authentication
• Limited employee access
• Automated security monitoring
• Audit logging

However, no system is 100% secure. We cannot guarantee absolute security.

14. Children's Privacy

Bloxtsar is not intended for children under 13. We don't knowingly collect information from children under 13.

If you're a parent and believe your child provided us information, contact [email protected] immediately so we can delete it.

15. International Users

Your information may be processed and stored in countries where our servers operate. By using Bloxtsar, you consent to this transfer.

16. Third-Party Links

The platform may link to external sites (Roblox games, Discord servers, social media). We're not responsible for their privacy practices. Review their policies when visiting external links.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date. Continued use constitutes acceptance of the revised policy.

For significant changes, we may post notices on the platform or through other official Bloxtsar communication channels.

18. Contact

Questions about this Privacy Policy or your data? Contact BXI Interactive, LLC, the operator of Bloxtsar:

• General support: https://bloxtsar.com/support
• Privacy & account deletion: [email protected]